Senior DevSecOps Engineer – Logistics

1. Infrastructure Management• Architect, deploy, and maintain highly available, scalable, and secure AWSenvironments for logistics SaaS applications.• Implement Infrastructure as Code (IaC) using tools like AWS CloudFormation,Terraform, or CDK.• Manage and optimize VPCs, subnets, security groups, EC2, S3, RDS (PostgreSQL),and ElasticSearch clusters.• Design multi-environment infrastructure (dev, staging, prod) with proper isolation,monitoring, and cost optimization.2. CI/CD and Automation• Build and maintain CI/CD pipelines for application and infrastructure deployments usingtools like Jenkins, GitHub Actions, CircleCI, or AWS CodePipeline.• Standardize deployment processes across backend, frontend, and microservices.• Integrate testing and security validation into pipelines (static code analysis, dependencyscanning, secret detection).• Ensure zero-downtime deployments and support frequent release cycles in agiledevelopment environments.3. Containerization and Orchestration• Design and manage containerized applications using Docker, Kubernetes, AWS ECS,and EKS.• Set up autoscaling policies, resource quotas, and health checks for high availability.• Manage container image scanning and secure image registries.4. Monitoring, Logging & Observability• Implement and maintain monitoring systems (Prometheus, Grafana, CloudWatch,Telegraf, InfluxDB).• Configure centralized logging (Elastic Stack/EFK, Graylog, Loki) and APM tools (NewRelic, Datadog, or Sentry).• Establish alerting rules for system health, latency, and security events.• Provide actionable visibility into production performance and reliability metrics.5. Security• Integrate security practices into DevOps pipelines.• Conduct regular vulnerability assessments and patch management acrossenvironments.• Implement identity and access management (IAM) best practices — least privilege,role-based access, MFA enforcement.• Ensure compliance with security frameworks (OWASP, ISO 27001, SOC 2).• Protect data integrity and privacy for sensitive logistics and customer data.• Support incident response and post-mortem analysis.6. Cost Management & Optimization• Continuously monitor and analyze AWS usage, identifying opportunities for costreduction and efficiency gains.• Implement autoscaling, rightsizing, and lifecycle policies for EC2, RDS, S3, andKubernetes clusters.• Use AWS Cost Explorer, Budgets, and CloudWatch Metrics to track and forecastspend.• Define and enforce tagging strategies for cost visibility by environment, team, orproject.• Optimize data storage and retention across logs, snapshots, and backups to reduceoverhead.• Collaborate with engineering and product teams to balance cost vs performance trade-offs.• Produce monthly cost reports and recommendations for leadership on optimizationinitiatives.7. Database and Application Performance• Maintain and tune PostgreSQL, Redis, Elasticsearch, or NoSQL databases foroptimal performance.• Perform query optimization, index tuning, and replication configuration forscalability and resilience.• Support developers in analyzing query performance and troubleshooting productionbottlenecks.8. Collaboration and Mentorship• Work closely with Developers, QA/QC teams, and Product Managers to improve systemreliability.• Mentor junior DevOps engineers on AWS, Kubernetes, and CI/CD best practices.• Participate in sprint planning, release readiness reviews, and production deploymentplanning.